Blog

Notes from the field

Practical writing about Apple device management: Jamf, Intune, Mosyle, Apple Business Manager, and the day-to-day reality of running an Apple fleet. Subscribe viaRSS.

Auto-assigning Macs to a Jamf site from an Entra ID smart group

Jamf sites are static and smart groups don't move records into them. Here's a scheduled routine that reads an Entra-tied smart group and assigns each member to the right site through the API.

A self-updating pkg: install the latest app version from Azure Blob in a postinstall

Stop re-packaging an app on every release. Build a payload-free pkg once whose postinstall downloads the current installer from Azure Blob Storage — replacing one blob ships a new version to everyone.

Why Jamf encrypted script parameters break on modern macOS

A policy that worked for years suddenly logs 'bad magic number' after a macOS update. Here's why LibreSSL breaks Jamf's encrypted script parameters — and the openssl flags that fix it for good.

Zero-touch deployment, explained for non-IT people

What actually happens when a new hire's MacBook configures itself out of the box — and what it takes to set that up with Apple Business Manager.

Jamf, Intune, or Mosyle? Choosing the right MDM for your Apple fleet

The three platforms I deploy most often, compared honestly — and the questions that actually decide which one is right for your organization.

No posts match — try a different tag or search.